nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-12-18 11:44:07 +00:00
Code Issues Packages Projects Releases Wiki Activity
7b8785b65d
nixpkgs/pkgs/os-specific/linux/firejail
History
Roosembert Palacios 831c700c5d
firejail: fix -overlay and -build functionality on NixOS 
- The `-overlay` flag runs the specified binary inside an OverlayFS,
  since the /nix store may be in a different mount point than the user
  home, this patch explicitly bind mounts it so it's available inside
  the overlay.

- profile builder: firejail provides facilities to build a new profiles.
  To do so, it execute the helper binary `fbuilder`, which in turn will
  execute firejail back with different options. This patch makes it use
  the binary available in PATH instead of the one produced at compile time.
  The compiled firejail binary doesn't have the necessary permissions,
  so the firejail NixOS module wraps it in a SUID wrapper available on
  PATH at runtime.

Signed-off-by: Roosembert Palacios <roosemberth@posteo.ch>
2020-11-27 23:14:58 +01:00
..
default.nix firejail: fix -overlay and -build functionality on NixOS 2020-11-27 23:14:58 +01:00
default.upstream
fbuilder-call-firejail-on-path.patch firejail: fix -overlay and -build functionality on NixOS 2020-11-27 23:14:58 +01:00
mount-nix-dir-on-overlay.patch firejail: fix -overlay and -build functionality on NixOS 2020-11-27 23:14:58 +01:00